This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/gFWxupsA8xVQdH1U_2_aBWNuGzc.roa File: gFWxupsA8xVQdH1U_2_aBWNuGzc.roa (raw, json) Hash identifier: uf2evP2kuoWzuBfUhkXptWJ5if216plKfcW97Lv64qo= Subject key identifier: 80:55:B1:BA:9B:00:F3:15:50:74:7D:54:FF:6F:DA:05:63:6E:1B:37 Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26 Certificate serial: 019BC0AE2E8388E97C384DEFF989D99A0F0C Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/gFWxupsA8xVQdH1U_2_aBWNuGzc.roa Signing time: Thu 15 Jan 2026 08:03:19 +0000 ROA not before: Thu 15 Jan 2026 08:03:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 43350 IP address blocks: 193.5.251.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 00:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:c0:ae:2e:83:88:e9:7c:38:4d:ef:f9:89:d9:9a:0f:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26 Validity Not Before: Jan 15 08:03:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8055b1ba9b00f31550747d54ff6fda05636e1b37 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:f9:da:87:1f:e0:0e:4d:0a:07:db:96:d2:26: dc:69:b5:a0:86:3c:34:93:dc:e4:ee:8f:d1:08:78: 99:5a:09:6a:f3:33:aa:39:b5:d9:0b:af:44:f8:1e: 50:7e:5e:d2:95:51:68:73:9a:44:de:29:32:5a:7a: 53:0a:2a:6e:85:16:2f:56:d4:6f:b8:ae:78:82:fd: e6:5b:b1:21:81:02:69:d6:e6:74:7f:41:90:25:1d: 34:6b:9f:9a:5e:2f:7f:29:28:f7:64:6c:97:c5:0a: a0:f6:90:8f:34:37:8e:38:ea:8c:c9:2c:75:9d:9a: ed:b0:3d:56:41:de:90:15:8a:c1:39:bf:05:04:1e: f5:32:64:c2:f1:23:b8:9e:5a:bc:8f:e1:da:c5:52: 53:29:33:1a:98:cf:d1:ca:33:61:29:bd:b3:7c:15: aa:aa:b3:e0:93:8a:d7:f5:52:0e:4a:3d:87:1a:2d: fb:40:81:77:5c:e8:8d:6a:f0:eb:b9:cd:34:72:1f: 91:61:f1:43:0c:fd:fc:50:81:2d:15:13:95:6a:74: bb:aa:82:22:4c:bf:23:ea:a3:81:4a:6a:87:be:d7: 68:04:c3:f0:c3:74:cf:03:24:5e:a5:1a:2f:27:b4: 17:13:a7:d1:b2:dd:ee:28:aa:00:74:69:f7:7e:99: 4a:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:55:B1:BA:9B:00:F3:15:50:74:7D:54:FF:6F:DA:05:63:6E:1B:37 X509v3 Authority Key Identifier: keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/gFWxupsA8xVQdH1U_2_aBWNuGzc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.5.251.0/24 Signature Algorithm: sha256WithRSAEncryption 7a:77:f1:0e:81:ee:fd:ff:9a:47:b9:b4:fa:a3:5d:92:81:f1: 60:e8:8f:f4:e7:b2:45:23:68:a9:17:cf:fd:5e:8f:05:3a:79: 4b:18:5e:d5:6c:5e:3c:47:93:d7:95:3c:0a:9d:d7:4b:b0:5e: e6:83:5b:68:8b:ac:f5:b3:f8:6c:a2:2d:88:cd:67:94:3a:75: 03:97:aa:e6:e0:e7:de:d3:d7:51:dd:89:74:e2:d9:e5:85:f3: 6d:62:6f:bd:8d:82:1c:bb:1c:00:29:2d:55:c7:5a:27:66:ff: 83:fa:ab:fb:54:7c:f4:5d:7a:43:f7:01:c4:25:e4:44:e4:e8: 2a:88:bc:f8:90:01:5e:7c:d0:c4:4a:cd:b9:54:44:90:f3:1f: 4e:25:e7:ba:de:bd:c4:ad:cc:c6:13:da:67:59:fb:6a:15:54: b6:c8:c5:39:0b:d2:96:6b:2a:be:4c:31:27:5c:d8:ec:c6:36: 58:c9:97:27:d2:a9:06:26:a5:0d:80:53:4f:cc:94:31:1e:86: 15:6b:ea:32:2f:6e:16:9d:5b:ab:67:bb:40:d9:44:49:f9:11: 74:70:62:70:08:48:ff:04:09:dd:4c:21:68:6c:a9:88:ca:0e: 0b:39:4f:8e:ef:49:8e:6e:56:dc:d8:a2:e3:f2:3f:07:90:5f: a4:de:48:60 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZvAri6DiOl8OE3v+YnZmg8MMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkNTU5YWFmYmZjMDkzMTI0MmUxZDYzNzI5OGNmMWRkMjIz ZTRjMjYwHhcNMjYwMTE1MDgwMzE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4MDU1YjFiYTliMDBmMzE1NTA3NDdkNTRmZjZmZGEwNTYzNmUxYjM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm/nahx/gDk0KB9uW0ibcabWghjw0 k9zk7o/RCHiZWglq8zOqObXZC69E+B5Qfl7SlVFoc5pE3ikyWnpTCipuhRYvVtRv uK54gv3mW7EhgQJp1uZ0f0GQJR00a5+aXi9/KSj3ZGyXxQqg9pCPNDeOOOqMySx1 nZrtsD1WQd6QFYrBOb8FBB71MmTC8SO4nlq8j+HaxVJTKTMamM/RyjNhKb2zfBWq qrPgk4rX9VIOSj2HGi37QIF3XOiNavDruc00ch+RYfFDDP38UIEtFROVanS7qoIi TL8j6qOBSmqHvtdoBMPww3TPAyRepRovJ7QXE6fRst3uKKoAdGn3fplKnQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIBVsbqbAPMVUHR9VP9v2gVjbhs3MB8GA1UdIwQY MBaAFH1Vmq+/wJMSQuHWNymM8d0iPkwmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTkt OGM1MDA3YzJhNGI2LzEvZ0ZXeHVwc0E4eFZRZEgxVV8yX2FCV051R3pjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTktOGM1MDA3YzJhNGI2 LzEvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwQX7MA0G CSqGSIb3DQEBCwUAA4IBAQB6d/EOge79/5pHubT6o12SgfFg6I/057JFI2ipF8/9 Xo8FOnlLGF7VbF48R5PXlTwKnddLsF7mg1toi6z1s/hsoi2IzWeUOnUDl6rm4Ofe 09dR3Yl04tnlhfNtYm+9jYIcuxwAKS1Vx1onZv+D+qv7VHz0XXpD9wHEJeRE5Ogq iLz4kAFefNDESs25VESQ8x9OJee63r3ErczGE9pnWftqFVS2yMU5C9KWayq+TDEn XNjsxjZYyZcn0qkGJqUNgFNPzJQxHoYVa+oyL24WnVurZ7tA2URJ+RF0cGJwCEj/ BAndTCFobKmIyg4LOU+O70mOblbc2KLj8j8HkF+k3khg -----END CERTIFICATE-----Generated at Tue Jan 20 09:05:54 2026 by rpki-client